So, our friends at Verisign have decided to return a Verisign address for
any DNS lookup that doesn't match a .com or .net domain.  Indications are
it's a way to skim lucrative "you missed" hits from AOL and MS.  (story:
http://story.news.yahoo.com/news?tmpl=story&cid=1804&ncid=1804&e=5&u=/washpost/20030916/tc_washpost/a996_2003sep12)

This breaks at least part of the Verify Return Paths protection.  Anyone
have any ideas on how (or if or should) we fix it?  If I felt sure they'd
keep the IP the same, I'd blacklist it, but I expect they'll change it alot
as people work around their land grab.
-- 
Michael Croft       http://www.whiterose.org/michael
SAM: It's 106 miles to the Crack of Doom. We've got a magic ring,
           two daggers, it's dark, and we're wearing sunglasses
FRODO: Hit it.

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to